Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/6158a737-4409-3f96-945a-309ff639f6a3.roa
File:                     6158a737-4409-3f96-945a-309ff639f6a3.roa (raw, json)
Hash identifier:          E/wLlQrBp2x4N1k7euJQmbRlzWakFAtvZH1Fqr8HL1w=
Subject key identifier:   3E:A5:0C:F9:84:11:DC:89:32:74:ED:45:09:F9:04:C9:A0:59:0D:9B
Certificate issuer:       /CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
Certificate serial:       010D0C9F43285845E42EC02A40FF58E8E04EAA40
Authority key identifier: 44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/6158a737-4409-3f96-945a-309ff639f6a3.roa
Signing time:             Thu 16 May 2024 11:24:34 +0000
ROA not before:           Thu 16 May 2024 11:24:34 +0000
ROA not after:            Wed 14 Aug 2024 11:24:34 +0000
asID:                     399542
IP address blocks:        2602:f8ef::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:2e:c0:2a:40:ff:58:e8:e0:4e:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
        Validity
            Not Before: May 16 11:24:34 2024 GMT
            Not After : Aug 14 11:24:34 2024 GMT
        Subject: CN=54f7fd6c-ca9f-4619-a707-9eb66875ee75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:76:d5:b1:59:fe:70:7c:e8:06:46:dc:94:1d:
                    b2:18:de:bc:aa:e1:15:26:96:25:c1:3c:1a:76:8b:
                    39:84:c5:5d:af:01:82:8d:6f:40:c9:79:e2:32:6b:
                    30:ba:f9:9a:97:00:1b:69:60:fa:7b:1a:22:a4:b7:
                    41:99:87:71:5d:d6:bc:cd:d8:0b:6a:39:e0:2d:be:
                    1b:cc:15:4e:74:75:45:7a:c5:67:44:31:0d:4e:2c:
                    22:2f:17:6a:6f:ed:83:f9:cb:34:3c:9b:6d:b4:5d:
                    5b:9c:14:75:13:b7:f5:61:87:d2:ec:e9:f8:0b:b4:
                    a9:4e:5f:7a:bd:53:87:12:34:2c:bb:9c:ea:11:72:
                    34:15:1e:64:e7:5c:8b:52:02:2a:93:39:55:69:27:
                    9f:c8:bb:ec:e5:77:8b:0a:60:c7:fd:84:de:95:67:
                    20:54:f6:f8:64:fc:8c:92:13:5c:12:83:3a:a5:53:
                    c0:8d:9e:f5:3f:29:f4:e7:c9:c1:e6:9a:b2:d5:0b:
                    04:05:4a:68:3b:53:cc:f7:70:75:32:8c:8a:77:21:
                    17:29:7b:de:14:26:0d:79:6e:b0:8f:95:30:43:44:
                    90:69:6c:6e:e1:c1:85:76:a4:fc:d3:3e:aa:fc:00:
                    cb:49:82:6b:1b:a0:0c:d7:1e:58:b7:8d:e2:59:33:
                    f2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A5:0C:F9:84:11:DC:89:32:74:ED:45:09:F9:04:C9:A0:59:0D:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/6158a737-4409-3f96-945a-309ff639f6a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl

            X509v3 Authority Key Identifier:
                keyid:44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ef::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:31:b2:4f:19:af:fb:53:89:58:25:f6:a5:95:3a:c6:a6:0c:
         4a:e5:f0:61:08:95:89:59:1c:50:3a:5c:a9:e0:ab:7a:3b:91:
         f7:df:66:60:8f:72:43:98:8c:30:f2:03:ff:8a:be:0e:9d:2e:
         b1:d0:0c:d6:3d:11:3a:6c:e2:db:e7:61:90:fa:31:26:bf:04:
         5e:c9:14:df:f5:d3:28:f8:f6:3d:ff:55:ab:50:35:2d:11:3c:
         4b:60:c9:5f:fd:b0:77:33:09:85:9f:de:f7:ef:b6:89:4f:0d:
         ae:1c:d3:e8:d4:71:c0:82:f2:e4:4a:1b:aa:b0:37:9b:58:6c:
         f3:38:75:1d:fe:ee:c3:df:e4:f5:20:31:8c:ba:c2:53:01:75:
         65:bb:b1:e4:69:55:ad:fc:1f:5a:2f:c0:f1:d8:2e:21:c9:32:
         e2:c6:e8:5f:60:a8:07:d5:7f:8e:c4:c9:ce:82:f3:2d:f9:bd:
         9d:c4:a1:96:f5:6a:47:aa:56:59:ff:ac:1b:74:3b:a3:87:b7:
         d0:83:f1:a9:96:b3:4b:56:af:cb:55:79:7e:12:e7:29:4f:c4:
         77:62:f6:c5:6a:0d:d8:68:2b:2d:86:71:37:a8:8e:ad:09:32:
         ea:72:1f:0c:1f:94:ba:06:3f:c4:c5:e0:a6:e6:c0:29:40:82:
         3e:80:ee:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:23:43 2024 by rpki-client on console-ams.rpki-client.org